Privacy Policy
How we handle your data.
We will never sell your data.
That's not a marketing line. It's a promise. We use your information to run the service, understand how people find and use NinjaBuy, and make the product better — never to sell it.
What we collect
- Account info — name, email, phone number
- Shipping addresses — so we can deliver your orders
- Order details — what you want us to buy and where to send it
- Balance — your store credit and transaction history
- Usage & source data — how you found us and how you use the Platform (pages, actions, referring links), so we can see what's working and improve it
- Session recordings — on the website and in the app we record how screens are used (taps, scrolls, what was on screen), so we can find what's broken or confusing. They stay with our first-party analytics provider and are never sold or used for ads
- Photos you choose — a picture you take or pick for photo search, as a reference for an item, or in a support chat. The app opens your camera or photo library only when you ask it to
- Messages — what you write to us in support chats about your orders
What we DON'T store
- Credit card numbers — never touch our servers. Payments are handled entirely by our payment processors. We never see, store, or process your full card details.
- Passwords in plain text — your password is hashed and encrypted. We couldn't read it even if we wanted to.
Who we share data with
We share data to fulfill your orders, operate the service and measure our advertising:
-
Shipping carriers — your address and package details, so they can deliver
-
Vendors — order details only (product links, quantities). We never share your personal contact info with vendors. We're your agent — they deal with us, not you.
-
Payment processors — handle all payment processing and compliance. We never see or store your full card details.
-
Service providers — the vetted tools we use to run NinjaBuy (hosting, first-party analytics, error monitoring, support). They process data on our behalf, under contract, only to operate the Platform — never for their own purposes, never to resell.
-
Ad measurement — with your permission where required, we use Google ad cookies and share sign-up and search activity, ad click identifiers and hashed verified email addresses or phone numbers with Google to measure which ads bring people to NinjaBuy. If you reject, Google can still receive cookie-free measurement signals; ad cookies and contact matching stay off. Hashing changes contact details into a matching code; it does not make them anonymous. You can accept, reject or withdraw permission through Cookie settings in the website footer.
-
TikTok — with your permission where required, we use its browser pixel to measure visits, sign-ups and searches, without contact matching. You can reject or withdraw permission through Cookie settings.
-
Meta — with your permission where required, we use its browser pixel to measure visits, sign-ups and searches, without contact matching. You can reject or withdraw permission through Cookie settings.
We do not sell your data or share it with data brokers.
Text messages
If you agree to get order updates by text:
- Your mobile information and text-message consent will not be sold or shared for third-party promotional messaging.
- All the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
- The only companies that handle your number for texting are the ones that deliver the messages — our messaging platform provider and the phone carriers — and only to deliver them.
- Message frequency varies, and message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.
Agreeing is optional. You can sign in and order without it.
Security
All sensitive data — passwords, emails, personal info — is encrypted in transit and at rest.
Payment refunds and payouts are approved by humans, not automated systems.
Don't even try hacking us. Passwords aren't stored in plain text, payment operations require human approval, and the only thing you'll get is a laugh.
Your rights
- Want your data? Ask us, we'll send it.
- Want it deleted? Ask us, we'll delete it.
- Want to close your account? Do it yourself in the NinjaBuy app (Account, then Delete account) or on the Delete your account page. Deleting is permanent: you are signed out everywhere, any connected AI assistant stops working, and you can't sign up again with the same phone number. We keep the order, payment and shipping records we need for accounting and legal obligations.
- Want to correct something? Ask us, we'll fix it.
Contact support through our website.
Connected creator channels
If you join the creator program, you can connect a TikTok, YouTube or Instagram account to your NinjaBuy account. Connecting proves the channel is yours, so nobody else can sign up as you — that is what it is for.
- What we read — the channel's public identity (id, handle, display name, picture), its public counts (followers, following, likes, number of posts) and the list of your public posts, so we can credit the content you make and rank creators in the program. We can't post, comment, message, read anything private, or see your password.
- What we keep — the channel id and handle on your account, and the access token the platform issued, stored like the rest of your account data and used only for the reads above. Revoke access on the platform and it stops working at once; ask us and we delete what we kept.
- YouTube — connected through Google using YouTube API Services, so the YouTube Terms of Service and the Google Privacy Policy also apply. NinjaBuy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke NinjaBuy's access any time from your Google security settings.
- TikTok and Instagram — revoke any time from TikTok's Manage app permissions or Instagram's Apps and websites settings.
Cookies
We use cookies to keep you logged in, remember your preferences, and power our own first-party analytics — so we can see how the Platform is used and make it better.
We're not coy about this part: we pay close attention to what you browse, search and buy on NinjaBuy, because that's how we learn what you actually want and go get it for you. We use that data to improve the service. The ad measurement sharing described above is separate from our session recordings.
Where permission is required, our advertising cookies stay off until you accept. You can reject them or change your choice anytime through Cookie settings in the website footer. Essential cookies still keep the service working.
Browser extension
Our browser extension shows NinjaBuy prices on the shopping sites you're already browsing (Taobao, Tmall, 1688, Weidian) and lets you add items straight to your NinjaBuy cart. It's optional — everything below applies only if you install it.
The extension runs only on those supported shopping sites. On them, it collects:
- Product data — the product information on the pages you view (title, prices, options, stock, seller name), so we can show whether the item is on NinjaBuy and import it if you want it
- Page snapshots & activity — the product page's data payload and HTML, plus a diagnostic trail of the page's own console messages and network requests, so we can debug extraction problems and keep the extension working when those sites change their format
- Browsing activity on supported sites — which product pages you visit and what you do in the NinjaBuy panel (viewed, added to cart), tied to a random device ID, and to your NinjaBuy account when you're signed in
- Diagnostics — errors from the extension's own code
What the extension does NOT do
- Nothing outside supported shopping sites. It has no access to any other website, and doesn't want any.
- No passwords, payment details, or messages — on any site, ever.
- No selling or sharing. Same promise as everywhere else here: data goes to NinjaBuy only, to run the service and improve it.
Data is sent only to ninjabuy.com over HTTPS. Signing in happens on ninjabuy.com itself — the extension never sees your credentials.
If you remove the extension, Chrome opens a short page asking why. Answering is optional. If you do, we receive only the reason you pick, any comment you type, and the extension's version number — not your account, device ID or browsing activity, and the answer isn't linked to you.
AI assistants and connectors (MCP)
If you connect an AI assistant to NinjaBuy (see Use NinjaBuy in ChatGPT and Claude), you sign in with your NinjaBuy account and we issue the assistant an access token tied to that account.
- What we receive — only the requests the assistant sends to the NinjaBuy server: the product links, and which account they are for. We do not receive your conversation with the assistant.
- What we keep — the NinjaBuy links created for you, the access and refresh tokens we issued, and the assistant's registration with us (its name and redirect URL). As everywhere on NinjaBuy, we also collect usage analytics on how the connection is used, to make the product better. We never sell it.
- Taking it back — remove the connector in your assistant, or email support@ninjabuy.com and we revoke it. Access tokens last 1 hour and refresh tokens 7 days.
Changes
If we update this policy, we'll post it here and update the date. No surprises.
Questions? Contact support through our website.